De-tokenization...

[Joel Auge]

Hi There,

We're building a stripe integration for Canada's largest charity and they're asking if it's possible to detokenize the credit card for usage with their legacy systems. We can tell by looking at the public docs/APIs that that's not the case, but we're interested in figuring out if there's at least a possibility here either with third-party tools or integrated directly with Stripe.

Let me know! Thanks!

J.

--

___________________________________

Joel Augé - CEO

FAN.SI - Custom Mobile Social Networks for the World’s Great Artists 

http://fan.si

Twitter: @getfansi

Instagram: @getfansi

1(888)-507-1FAN (1326)

[Matthew Arkin]

I don't believe you can de-tokenize. However, since detokenization would require you have a PCI compliance level that supports raw card data on the server, you could just not tokenize (or tokenize on the server). You will want to make sure you're PCI compliant for that (PCI SAQ D and depending on how many transactions you do you may need a QSA). 

Essentially this just means not using Stripe.js and having your server interact with the card data directly. I'd recommend reaching out to support.stripe.com/email if you have some questions about the PCI / compliance nature of this type of integration.

Matt Arkin

--
You received this message because you are subscribed to the Google Groups "Stripe API Discussion" group.
To unsubscribe from this group and stop receiving emails from it, send an email to api-discuss...@lists.stripe.com.
To post to this group, send email to api-d...@lists.stripe.com.
Visit this group at https://groups.google.com/a/lists.stripe.com/group/api-discuss/.

[James]

It is also my understanding that Stripe themselves in fact do not hold the original card numbers submitted to them. From what I can recall, they are actually truly tokenized on Stripe's side too.

[Remi J.]

Hey!

We do have the card numbers on our end as it's needed to charge the card more than once for example.

Cheers,

Remi

[Mattias Fjellvang]

I would recommend you looking into Spreedly. They have a vault you can use, where credit cards will be stored and sent to Stripe or any other payment gateway.